Since I wasn't sure if this is just what their ToS claim or how it's handled in practice, I googled a bit, and found this case: https://finance.yahoo.com/news/

Since I wasn't sure if this is just what their ToS claim or how it's handled in practice, I googled a bit, and found this case: https://finance.yahoo.com/news/coinbase-hacked-accounts-get-no-justice-from-horrible-us-laws-fintech-lawyer-113520348.html https://finance.yahoo.com/news/coinbase-hacked-accounts-get-... So this indeed seems to be how Coinbase handles it.